Skip to content
0:00 / 0:00

#npm#node_modules#supplychainsecurity

It's a Jungle Out There: What's Really Going on Inside Your Node_Modules Folder, Feross Aboukhadijeh

JavaScript Conferences by GitNation

19K subscribers • 2 videos on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • Presented by Feross Aboukhadijeh, founder of Socket

Intermediate. Assumes working knowledge.

4.3K views4 years ago1 recommendation

SecurityTools and practiceWeb and application securityExploits and vulnerabilitiesNode.js, Deno and Bun

Feross Aboukhadijeh discusses the rise of software supply chain attacks in the npm ecosystem and how developers can protect their applications.

Node Congress 2022 #NodeCongress #Node #GitNation Website – nodecongress.com/ Follow the link to watch the full version of all the conference talks, QnA’s with speakers and hands-on workshop recordings → portal.gitnation.org/events/node-congress-2022 Talk: It's a Jungle Out There: What's Really Going on Inside Your Node_Modules Folder Do you know what’s really going on in your node_modules folder? Software supply chain attacks have exploded over the past 12 months and they’re only accelerating in 2022 and beyond. We’ll dive into examples of recent supply chain attacks and what concrete steps you can take to protect your team from this emerging threat. This event would not take place without the support of sponsors: 🏆 Platinum Sponsors Prisma → prisma.io/ Toptal → toptal.com/ 🥇 Gold Sponsors StackHawk → stackhawk.com/ Sentry → sentry.io/ DNSimple → dnsimple.com/ Platform.sh → platform.sh/ MUX → mux.com/ 🥈 Silver Sponsors Stream → getstream.io/ Twilio → twilio.com/ MediaJAMS → mediajams.dev/ PolyScale → polyscale.ai/ Turing → developers.turing.com/ Fauna → fauna.com/ Adevinta → adevinta.com/careers Microsoft → microsoft.com/en-ie/

Why it's here

1 person recommends this

What people say. Recommended as an insightful talk on npm module vulnerabilities and supply chain security risks.

u/HappyZombiesin r/node • Recommends

On “One in two new NPM packages is SEO spam”

OP: These npm packages are littered with ads!! The article: literally an ad lol For more info, Here’s a good talk on npm modules and what other vulnerabilities are out there link to this video

u/HappyZombiesin r/node • Recommends

It's a Jungle Out There: What's Really Going on Inside Your Node_Modules